News for hackers. Stuff that matters.

A comment on The password “ji32k7au4a83” has been seen over a hundred times. Parent comment

Re:The password “ji32k7au4a83” has been seen over a hundred ... by cyberferret on Sunday March 03, 2019 @09:28PM (#19298346)
I see this same explanation on the Twitter thread, which is great.

However, I am concerned at how the OP got the string in the first place, that he compared to HaveIBeenPwned? Is he storing his user's passwords in plain text in his back end database, and decided to run them all against the service?? That in and of itself is a security red flag.

[ Parent | on HN ]
Re:The password “ji32k7au4a83” has been seen over a hundred ... by geofft on Sunday March 03, 2019 @11:00PM (#19298664)
I am reading this as OP looking at password breach databases (which are, by definition, public and plaintext already), not OP running a service with password registration themselves.
[ Parent | on HN ]
Re:The password “ji32k7au4a83” has been seen over a hundred ... by astura on Monday March 04, 2019 @06:11AM (#19300380)
Lists of common passwords compiled from previous data breaches are readily available online.
[ Parent | on HN ]